Privacy Policy

Last updated: 22nd February 2026

1. Who We Are

House of Vanitas (“we”, “us”, “our”) operates this website at www.houseofvanitas.com.

For the purposes of UK data protection law, we are the Data Controller responsible for personal data collected through this website.

Contact: See our Contact page

2. What Personal Data We Collect

We may collect:

  • Name
  • Email address
  • Any information you provide via contact forms
  • Technical data (IP address, browser type, device type, pages visited)
  • Analytics data (via cookies – see Cookie Policy)

We do not collect payment information directly if purchases are made through third-party platforms such as Photo4Me. In those cases, the third party acts as Data Controller for transaction data.

3. Lawful Basis for Processing (UK GDPR)

We process personal data under the following lawful bases:

  • Consent – when you opt into communications
  • Legitimate Interest – to operate and improve our website
  • Contractual Necessity – if you request services
  • Legal Obligation – where required by law

4. How We Use Your Data

We use your information to:

  • Respond to enquiries
  • Communicate about artwork or exhibitions
  • Improve website performance
  • Maintain security

We do not sell, rent, or trade personal data.

5. Data Sharing

We may share limited data with:

  • Website hosting providers
  • Analytics providers (e.g. Google Analytics)
  • Legal or regulatory authorities if required

We ensure third-party providers comply with applicable data protection law.

6. Data Retention

We retain personal data only for as long as necessary for the purpose it was collected, or as required by law.

7. Your Rights Under UK GDPR

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion
  • Restrict processing
  • Object to processing
  • Data portability
  • Withdraw consent
  • Lodge a complaint with the Information Commissioner’s Office (ICO)

ICO: https://ico.org.uk

8. Data Security

We implement appropriate technical and organisational measures to protect your data.

However, no internet transmission is completely secure.

9. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page.